You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

please help!

someone please help this is really annoying......im pretty good at computers and i still cant figure this out..... here is the log maybe somone can help me get rid of this nasty little bugger.....thanks to all whom help

Note: there is a legitimate Windows file in the C:\WINDOWS\system32\ folderC:\WINDOWS\system32\winlogon.exe <-- this file in this folder is legitimate

Please print or copy these instructions because you are not able to access the Internet in SafeMode.

Download Ad-aware SE 1.05: hereInstall it. When you get the last screen, with the "Finish" button and 3 options, uncheck those three items.Open AdAware and click the "Check for updates now" link. Close AdAware. Don't use it yet.

Make sure you are set to show hidden files and folders: A. On the Tools menu in Windows Explorer, click Folder Options.B. Click the View tab.C. Under Hidden files and folders, click Show hidden files and folders.D. Uncheck Hide extensions for known filetypes and Hide protected operating system files.How to see hidden files in Windows

These are suspect. Fix these if c:\windows\system32\dllcache\win32\winlogon.exe <-- this file is bad. Check the file first.O23 - Service: NTLOAD - Unknown - c:\windows\system32\dllcache\win32\winlogon.exeO23 - Service: NTSVCMGR - Unknown - c:\windows\system32\dllcache\win32\winlogon.exeNote: there is a legitimate Windows file in the C:\WINDOWS\system32\ folderC:\WINDOWS\system32\winlogon.exe <-- this file, in this folder is legitimate

I found no information about this file. If you don't know what it is/does check this entry:O4 - Startup: Runner.LNK = C:\Program Files\Hypno\Runner.EXE

Close all other windows and browsers, and press the Fix Checked button.

Search for these files and delete them if found:C:\WINDOWS\System32\siq.dll <-- this fileC:\WINDOWS\System32\webalize.dll <-- this fileC:\WINDOWS\hmidrbin.exe <-- this fileC:\WINDOWS\System32\ukc.exe <-- this file

c:\windows\system32\dllcache\win32\winlogon.exe <-- this file, if it is bad, check the file firstNote: there is a legitimate Windows file in the C:\WINDOWS\system32\ folderC:\WINDOWS\system32\winlogon.exe <-- this file, in this folder is legitimate